Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37372e302f32342d3234203d3e20323731333136.roa
File:                     3230302e35332e37372e302f32342d3234203d3e20323731333136.roa (raw, json)
Hash identifier:          uk3G9Lcj6/yLzRxwgQk5g/RhqKY5gdLDu9ieBgw4zyc=
Subject key identifier:   C7:56:E8:0A:84:A9:F3:6B:AD:D0:C5:CF:F0:00:2E:E7:BD:DA:EC:64
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       06C5748762E958C21007EC5668FB01ACD493C2A9
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37372e302f32342d3234203d3e20323731333136.roa
Signing time:             Tue 14 Jul 2026 19:32:32 +0000
ROA not before:           Tue 14 Jul 2026 19:27:32 +0000
ROA not after:            Tue 13 Jul 2027 19:32:32 +0000
asID:                     271316
IP address blocks:        200.53.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c5:74:87:62:e9:58:c2:10:07:ec:56:68:fb:01:ac:d4:93:c2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Jul 14 19:27:32 2026 GMT
            Not After : Jul 13 19:32:32 2027 GMT
        Subject: CN=C756E80A84A9F36BADD0C5CFF0002EE7BDDAEC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:77:bf:db:1f:2d:02:a2:51:df:22:99:aa:
                    e7:64:75:90:8e:7e:1d:a2:9c:ed:86:1a:24:fd:ac:
                    9a:b3:6a:aa:db:c7:b3:39:57:e2:33:84:42:dd:d9:
                    3c:d2:90:23:9a:59:c3:79:f0:73:05:45:9d:e4:a9:
                    a4:9b:63:ab:b2:7a:09:33:5a:90:ac:48:dd:5f:fa:
                    2d:03:fc:89:fd:97:c8:67:e5:79:83:72:03:d6:8a:
                    74:de:69:58:43:e0:1a:c7:4c:f6:b1:98:47:22:0b:
                    d3:27:3e:3e:fc:56:61:c7:43:28:10:c0:fa:85:12:
                    f8:a1:bc:b7:86:ce:55:77:7e:e1:96:61:cb:34:a8:
                    96:c8:15:aa:61:a2:2b:55:4a:09:76:6c:dd:e7:53:
                    52:33:51:66:16:48:7a:44:c3:75:4e:7a:e2:e7:c7:
                    3f:8e:f2:cc:8d:b4:03:68:65:34:cf:9f:21:64:3e:
                    24:34:10:97:ce:78:02:78:3c:75:ec:d1:c4:5d:44:
                    6d:51:6e:ac:f2:3b:2c:11:71:48:71:7d:fc:51:c6:
                    3d:06:9d:47:58:a6:56:ff:ca:98:04:a6:95:e3:e4:
                    20:67:4d:c5:40:87:d2:02:45:3d:8d:bf:d4:79:46:
                    06:f6:78:cb:37:d9:3f:ed:01:4a:be:23:a0:bc:f7:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:E8:0A:84:A9:F3:6B:AD:D0:C5:CF:F0:00:2E:E7:BD:DA:EC:64
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37372e302f32342d3234203d3e20323731333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:0a:86:16:92:fb:4e:f0:e9:43:f7:2b:95:4c:c8:26:41:64:
         5a:a9:99:66:9e:3f:53:3d:8a:ef:f6:92:a5:bb:6f:63:99:b5:
         fc:cf:90:ac:ba:8e:de:f6:90:1f:36:39:15:ca:87:d1:01:ca:
         e0:bd:26:81:67:26:b6:cd:05:ad:13:ab:8e:94:12:4b:a2:1b:
         9b:3d:19:63:a3:cb:88:89:bd:7f:07:6a:dd:e0:e8:57:10:5d:
         82:c3:07:56:2f:33:78:0c:dc:dd:67:40:da:2a:a9:f6:e9:ff:
         28:a4:ee:52:81:04:75:86:84:a0:49:5a:3e:43:60:82:89:44:
         93:b0:a1:0f:7a:77:74:80:24:e7:5e:59:57:ee:fc:ae:10:db:
         3e:9c:4c:29:78:41:1b:55:fb:3b:78:65:7c:4f:5d:5b:83:7b:
         95:15:31:bb:f6:38:5c:d1:48:48:80:4f:0f:fc:db:62:40:14:
         ef:05:ce:a4:ee:f5:9d:07:69:3b:5c:32:57:d1:11:ae:5c:15:
         d3:1a:d1:fd:0d:0a:af:50:50:cc:8f:77:2e:6d:ee:dc:63:0d:
         52:ad:52:80:cd:99:e8:82:7a:6c:1c:46:d7:10:aa:5b:9f:96:
         2d:ee:5d:ff:e4:12:e1:be:9c:45:c5:aa:c3:ca:5f:09:db:0f:
         29:56:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:29:09 2026 by rpki-client